Unprivileged containers inside privileged LXD container

[tomp (Thomas Parrott)]

@mlow

My understanding is that setting security.nesting=true + security.privileged=true on an LXD container has severe security implications - software within the LXD container can potentially affect the host.

That is correct.
See What does security.nesting=true? - #2 by stgraber